Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 06:16
Static task
static1
Behavioral task
behavioral1
Sample
482d771db9691a59fd23fe12247e41c0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
482d771db9691a59fd23fe12247e41c0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
482d771db9691a59fd23fe12247e41c0_NeikiAnalytics.exe
-
Size
114KB
-
MD5
482d771db9691a59fd23fe12247e41c0
-
SHA1
2e8545cbf0f3824cc39370fa25a81bfc7600b7ee
-
SHA256
999a5fa8f7ed1b41e8e886c669ceeb8525674d081fff99f4fd4bb186a95224dc
-
SHA512
549404b4ba6d85a38455be7802d1c8e789872bec78eb6bc90f88849ada2677a0ba8e9dda52d98b55d49d265b7a12c3afa24c7613ff5713ed13781b1eebc69c15
-
SSDEEP
3072:atwizQTj8CSUYf8W3nSjen++Bj88OZS0/Qe2HdOjlqwM:euj8NDF3OR9/Qe2HdI8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3988 2920 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\482d771db9691a59fd23fe12247e41c0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\482d771db9691a59fd23fe12247e41c0_NeikiAnalytics.exe"1⤵PID:2920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2920 -s 2322⤵
- Program crash
PID:3988
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2920 -ip 29201⤵PID:1644